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Abstract. The p-ary function f(x) mapping GF(p 4k ) to GF(p) given 
by f{x) = Tr4fc(x p ~ +p ~ p +1 + x 2 ) is proven to be a weakly regular 
bent function and the exact values of its Walsh transform coefficients are 
found. The proof is based on a few new results in the area of exponential 
sums and polynomials over finite fields that may also be interesting as 
independent problems. 

1 Introduction 

Boolean bent functions were first introduced by Rothaus in 1976 as an interesting 
combinatorial object with the important property of having the maximum Ham- 
ming distance to the set of all affine functions. Later the research in this area 
was stimulated by the significant relation to the following topics in computer 
science: coding theory, sequences and cryptography (design of stream ciphers 
and S'-boxes for block ciphers). Kumar, Scholtz and Welch in [1] generalized the 
notion of Boolean bent functions to the case of functions over an arbitrary finite 
field. Complete classification of bent functions looks hopeless even in the binary 
case. In the case of generalized bent functions things are naturally much more 
complicated. However, many explicit methods are known for constructing bent 
functions either from scratch or based on other, simpler bent functions. 

Given a function f(x) mapping GF(p n ) to GF(p), the direct and inverse 
Walsh transform operations on / are denned at a point by the following respec- 
tive identities: 



Tr„(fc:r) 



S f (b)= Yl ^ {x) - Tl " {bx} and ^ /(x) = 4r E S f^ 

ieGF(p™) P b€GF(p™) 

where Tr„() : GF(p n ) — » GF(p) denotes the absolute trace function, u> = e * is 
the complex primitive p th root of unity and elements of GF(p) are considered as 
integers modulo p. 
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According to [1], f(x) is called a p-ary bent function (or generalized bent 
function) if all its Walsh coefficients satisfy \Sf(b)\ 2 = p n . A bent function f{x) 
is called regular (see [1, Definition 3] and [2, p. 576]) if for every b £ GF(p") the 
normalized Walsh coefficient p~ n / 2 Sj(b) is equal to a complex p th root of unity, 
i.e., p~ n / 2 Sf{b) — u>t*( b ^ for some function /* mapping GF(p n ) into GF(p). A 
bent function f(x) is called weakly regular if there exists a complex u having 
unit magnitude such that up- n / 2 S f (b) = uj f '^ for all b £ GF(p"). We call 
u -!p™/ 2 the magnitude of Sf(b). Throughout this paper, p n l 2 with odd n stands 
for the positive square root of p n . For a comprehensive reference on monomial 
and quadratic p-ary bent functions we refer reader to [3] . 

In the present paper, we take an odd prime p and examine prospective p-ary 
bent functions having the form f{x) = Tr„ (a x d ° + a\x dl ) with a i; x £ GF(p n ) 
and arbitrary integer exponents di for i = {0, 1}. Functions of this type with 
both coefficients <ij being nonzero are called binomial. We prove that f(x) = 

/ 3k 2fc k ti\ 

Tr„(x p +p ~ p + + x ) is a weakly regular bent function for n = Ak and find 
the exact values of its Walsh transform coefficients. It is interesting that in the 
binary case when p = 2, the decimation 2 3fc — 2 2k + 2 k + 1 which is cyclotomic 
equivalent to the exponent in the first term of the above bent function, was 
studied by Niho in [4, Theorem 111] and Helleseth in [5]. They proved that 
the cross-correlation function between two binary m-sequences given by this 
decimation is four-valued and found the distribution. 

Note that the only not weakly regular bent function known so far is the power 
function from [3, Fact 1]. Here we present a binomial with this property. 

Fact 1 The ternary function f(x) mapping GF(3 4 ) to GF(3) given by f(x) = 
Ti4 (aox 22 + x 4 ), where ao £ {£ 10 ,£; 30 } and £ is a primitive element o/GF(3 4 ), 
is bent and not weakly regular bent. 

It is interesting to note that 22 = 3 3fe - 3 2fe + 3 fe + 1 for k = 1 . Unfortunately, 
we were not able to find a family containing the function from Fact 1. Naturally, 
more binomial bent functions of these types can be constructed using cyclotomic 
equivalence of exponents and coefficients. 

2 Preliminary Results 

In this section, we present some preliminary results. However, they may also 
be interesting as independent finite field problems. The finite field GF(p k ) is a 
subfield of GF(p n ) if and only if k divides n. The trace mapping from GF(p n ) 
to the subfield GF(p k ) is defined by Tr£(:r) = J2?io^ x ^ ■ In thc 

case when 

k = 1, we use the notation Tr„(x) instead of Tr"(x). 
Proposition 1. Let n = Ak and for any a £ GF{p n ) define 

C{a) = J2 c T -(*+- (p2fc+1)/2 ) . (1) 

zeGF(p") 
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Then 

( sp 3k , ifa + aP 2 " = -2 

(7(a) - C(-a) = I - sp z\ lfa + aP™ = 2 

t 0, otherwise , 

where s = (— l) k if p = 3 (mod 4) and s = 1 otherwise. 

Proof. Denote d = (p 2fe + l)/2 which is odd. First, note that d = (p 2fe -l)/2 + l = 
1 (mod p — 1) and, therefore, fa; + a(tx) d = t(x + ax d ) for any t e GF(p). This 
means that all nonzero elements in {Tr„(x + ax d ) \ x E GF(p™)} appear equally 
often and C(a) is an integer. 
We can calculate 

a£GF(p") a,i,i;£GF(p") 

= Y, u^+y) cu Ti -( a{xd+vd) ) 

= P n +p n £ Yl ^( x ^) 

zGGF(p™), z d = l rreGF(p")* 

= P n +P n (p n - 1) -P n *{z G GF(p") | z d - 1, z ^ 1} 
= p 2 "+p"(l-d) , 

where in (*) we made a substitution y = —zx. Similarly 
£ C(a)C(-a)= P «+ P " J] E 

a£GF(p") ^eGF(p"),z ti = la;eGF(p")* 

= P n - G GF(p n ) | z d = 1} = p n (l - d) , 

where y — zx. Therefore, 

]T (C(a)-C(-a)) 2 = 2l £ C(a) 2 - £ C(o)C(-o) j - 2p 2 " . 

a£GF(p") \aGGF(p") aeGF(p") / 

Further, since any a G GF(p") with Tr^a) = a + a v =2 can be uniquely 
written as a = 1 + 6 for some 6 <G GF(p n ) with Tr% k (b) = 0, we can write 

Y C(a)= J2 " T ^ X+X ^ E ^"M. (2) 

aeGF(p"),Tr5 fc (a)=2 i£GF(j,») bGGF(p" ) , Tr J fc (6)=0 

If x is a nonsquare then select r G GF(p™)* with r p _1 = — 1 (note that such 
r is a nonsquare in GF(p") since d is odd) and write x = ry 2 for y G GF(p™)*. 
Then 

TV„(&z d ) - Tr^V^ 1 ) = Tr 2fe (yf 2fc+1 (6r d + ^V*")) 

= Tr 2k (yV 2k+1 (br d + (-b)(-r) d )) = 2Tr 2fe (br d y^ +1 ) 
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Since br d runs through all GF(p 2fe ) when b runs through the elements of GF(p") 
with Tr2fe(&) = 0, then the inner sum in (2) is equal to zero. If x = y 2 is a square 
in GF(p n ) then x d G GF(p 2fe ) and Tr n (bx d ) = Tr 2 k{x d Tr^ k (b)) = 0. Therefore 
the sum in (2) is equal to 

2 ^ 

y eGF(p") 

2 reRzeGF{p 2k )* 



2k 2k I/ 2fc\2^ 

2 reRz£GF(p 2k y* 

E (,(<. + . + + 

sp 5fc 



2 ' 

where in (*) we made a substitution y = rz with r G i? = | i = 0, . . . ,p 2fe } 
and z G GF(p 2fc )*, £ being a primitive element of GF(p"). At the end, we used 
[3, Corollary 3] assuming s = (— l) fe if p = 3 (mod 4) and s = 1 otherwise, ?7(-) 
is the quadratic character of GF(p 2fc ). Also note that r + r p =0 only for r = £ d . 
Similarly, 

£ CH0~£ £ (,((r-^ W + l) + ^-^ 

aGGF(p"),TrJ fc (a)=2 r€fl,r^l 

since r — r p — only for r = 1. Also observe that (r — r p ) 2 is a nonsquare in 
GF(p 2fc ) for any r G R except when r = 1, which can be seen from the following. 
If i = r — r p =/= then t p — —t and t = for some i = d (mod p 2fc + 1). 
Thus, i 2 = £( p + 1 )( 2 J+ 1 ) = 7 2 - 3 " 1 " 1 , where 7 is a primitive element of GF(p 2fe ). 
From the identities proven earlier it follows that 

£ (C(a)-C(-a)) = Yl (C(-a)-C(a)) = -sp 5 

aeGF(p»), TrJ fc (a)=2 aeGF(p"), TrJ fc (a) = -2 



Since C(a) is an integer, the average value of C(a) — C(—a) over all the elements 
a G GF(p n ) with Tr£ fc (a) = 2 (resp. Tr^(a) = -2) is equal to -sp 3k (resp. sp 3fe ) 
and we obtain 

]T (C(a) - C(-a)) 2 > 2p 2 « = £ (C(a) - C(-a)) 2 . 

aeGF(p"),TrJ fc (a)=±2 aeGF(p") 

Thus, the above inequality becomes an identity leading to C(a) = C(—a) for 
any a G GF(p n ) with Tr r 2 l fc (a) ^ ±2. Also, 

2 (C(a)-C(-a)) 2 = 2 (C( a )-C(- a )) 2 =p 2 " 

aeGF(p»), Tr5 fc (a)=2 o£GF(p"), TrJ fc (a) = -2 
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that is the lowest possible value of these sums of squares and which is possible 
only if C{a) - C(-a) = sp 3k (resp. C(a) - C(-a) = sp 3k ) when Tr^(a) = 2 
(resp. Tr^(a) = -2). □ 

Let n be even and U denote a cyclic subgroup of order p n l 2 + 1 of the 
multiplicative group of GF(p") (generated by £ p " /2 ~\ where £ is a primitive 
element of GF(p™)). Denote subsets of {/ containing squares and non-squares 
respectively as 

U+ = {u G U | m (p" /2 +D/ 2 = 1} and U. = {u G U \ u <r n " +1 V 2 = -1} . 
Also, if n — 4k then for any c G GF(p k ) and any fixed b G GF(p n ) denote 
n+(c) = #{m G ?/+ | Tr£(6u) = c} and n_(c) = #{w G l/_ | Tr£(ou) = c} . 
Note that (-1)(p 2 "+ 1 )/ 2 = -1 and thus, -U+ = U- 

Proposition 2. Let n = 4k and take any b G GF(p"). T/ien n+(c) = n_(c) 
/or any c G GF(p fe ) except w/ien Tr^o^ 1 )/ 2 ) ^ and c = ±Tr£( (P 2fc+1 )/ 2 ) . 

7/c = Tr^(o<P 2 ' c + 1 )/ 2 ) ^ tfcen n+(c) - n_(c) = sp fe , w/iere s = (-l) fe 
p = 3 (mod 4) and s = 1 otherwise. 

Proof. The claimed statement is obvious for 6 = so further on assume b ^ 0. 
Denoting d = (p 2k + l)/2 we can write 



p 5k 



ueGF(p»)i6GF(p") yeGF(p fc ) 
_ ^2 ^ _Tr " ( c2/ / 4+:E ) ^ w Tr„( a 6«+a;M d ) 

x£GF(p") yGGF(p fc ) u£GF(p") 
- E E w -Tr„(y(c/4+ Z )) ^ w Tr„(t, +2: (t,/6) d ) 

zSGF(p") y eGF(p fc )* v£GF(p") 

+ E E u> Tr "( a: (" d - 1 )) 

x6GF(p")M6GF(p") 

= ]T J] u-Mv^U'V) + P n d 

z£GF(p») yGGF(p fc )* 

= p fc J2 C(zb- d )- Yl C(zb- d )+p n d, 

Tr£(z) = -c Z £GF(p") 

where in (*) we made substitutions v = ybu and x = yz and using that y d = y 
for y G GF(p k ); exponential sum C(-) comes from (1). Similarly, 

p 5fc n_(c)=p fc J2 C(zb- d )- J2 C(zb- d )+p n d 

Tr£(z)=c zeGF(p") 
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and, therefore, by Proposition 1, 

p>+(c) n_(c)) = Yl ( C ( zb ~ d ) C (- zb ~ d )) 

Tr£(z) = -c 

= S p 3fc # {z e GF(p") | Tr£(z) - -c and Tr^ (zb- d ) = -2} 
- S p 3fe # {z G GF(p") | Tr£(z) = -c and Tr£ fe - 2} 

= sp 3fc (™_(-c)-TO + (-c)) , 

where m + (c) and m_(c) are defined implicitly. 

First, consider the case when & is a square in GF(p n ) that holds if and only 
if b d e GF(p 2fe ). Then, 

T^ k (zb- d ) = (z + z? 2k )b- d = ±2 

2k j 

is equivalent to z + z p = ±26" giving 

Tr£(z) = ±2 (b d + b pkA j = ±Tr£ (b d ) . 

Note that z + z' p2k = a has p 2k solutions in GF(p n ) for any a e GF(p 2fe ). If 
c ^ ±Tr£(& d ) then m+(-c) = m_(-c) = 0. If c = Tr£(fe d ) = then m+(-c) = 
m_(-c) = p 2k . If -c = Tik(b d ) ^ then m+(-c) = p 2k and m_(-c) = 0, if 
-c = -Tr£(k d ) ^ then m+(-c) = and m_(-c) = p 2fe . 

Finally, if 6 is a nonsquare in GF(p n ), i.e., fe^" -1 )/ 2 = — 1, that holds if and 
only if Tr" fc (6 d ) = 0, then 

Tr^ (zb- d ) = (z- z p2k ^j b- d = ±2 

2k j 

is equivalent to z — z p = ±2b d . We can write 

/ fe m+( C ) = Yl E ^ Tr "( a:(Z - zp2fc - 2b£!) ) ^ ^^(Tr^^-c)) 

z6GF(p")xGGF(p") ^gGFtpfc) 
= uj -Tt 7l (cy/4+2xb d ) ^ ^^(ziv+x-x" 2 ")) 

i£GF(p") yGGF(p fc ) z6GF(p") 
^p" ^ a; -Tr n (c(x I>2 ' t -x)/4+2x6< i ) 

i£GF(!)"),i(i)=0 

i£GF(!)"),L(i)=0 

i£GF(p"),L(i)=0 

= p 5fc m_(c) , 

where in (*) we used that y — x p2k — x E GF(p k ) that is equivalent to L(x) = 
x - x p " - x p2k + x p3k =0. □ 
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Note that n+(c) - n_(c) = -sp fc if c = -Tr^fe^ 1 )/ 2 ) ^ 0. 
Proposition 3. Let n = 4k and take any c £ GF(p fc )*. TTie polynomial 
T+(X, c) = X^+V' 2 + (X + C )(f 2fc +D/ 2 + ^ fc ^ fc+1 )/ 2 + (X + c )f fc (f 2fc +D/2 

splits over GF(p") and for any root x of T + {X, c), both x and x + c are squares 
in GF(p") and x ^ 0. On the other hand, the polynomial 

T_(X, c) = X<f 2fc+1 )/ 2 - (X + C )(f 2fc +D/ 2 + ^<f 2fc+1 )/ 2 - (X + c )f fc (P 2fc +D/ 2 

does not have any roots in the set of squares o/GF(p"). Moreover, for different 
values of c, the corresponding roots ofT + (X 1 c) belong to disjoint subsets. 

Proof. First, we find the number of roots of T + (X,c) in GF(p"). Note that all 
roots of T + (X,c) and T_(X, c) are exactly the roots of respectively T + (X, 1) 
and T_(X, 1) multiplied by c. Moreover, any c e GF(p fe )* is a square in GF(p"). 
Therefore, it is sufficient to assume c = 1. Also note that 

T+(0, c) = C (f 2fc +D/ 2 + cP fc ( P 2fc +D/ 2 = 2c + . 

Here we use the representation of x G GF(p n ) suggested in [6, Theorem 11]. 
After fixing any t 6 GF(p n )*, we can write x = a + tor 1 , where a and to -1 are 
the two roots in GF(p 2 ™)* of z 2 — zz+t = 0. Note that X = oei+ta^ 1 = a 2 +ta' 2 1 
gives (ai — a 2 ) ((aia^) -1 ^ — l) = which holds if and only if a\ = a 2 or 
ct\ct 2 = t. Therefore, exactly two different values of a give the same x, unless 
a 2 = t. 

In our case, take t — v 2 , where 

Efl, ifp= 1 (mod 4) 
-£±i, if p= 3 (mod 4) , 

which means 2v = (p— 1)/2. Denote d = (p 2fe +l)/2. Replacing x with a;+(p— 1)/2 
and using the above substitution for x we obtain 



T+fol) = (x + 



-. \ d / t \ d / -, \ dp / * 

p — 1 \ / p — 1 \ / p — 1 \ / p — 1 



(a + v) 2d + (a- v) 2d ((a + v) 2d + (a- v) 2d \ P " 



+ 



= 2 



= 2( a d + ^) (« 2 a -^ +1 ) + l) , 
since v p = v. Thus, T + (x, 1) = if and only if 

c^*- 1 ) = -1 or a d ^+^ - -« 2 . (3) 
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In particular, this means respectively that a p " 1 = (— l) 2 (p t+1 ) = 1 or a p " 1 = 
(— v 2 ) 2 ^ 1 -1 ) = 1 and for this reason, a G GF(p"). Therefore, x = a + v 2 oT x G 
GF(p") for any a with T + (a + v 2 oT x , 1) = 0. 

Let £ be a primitive element of GF(p n ). Equation a di - p _1 ) = — 1 = £(p _1 )/ 2 
has - 1) solutions and a d ^ k+1 ^ = -v 2 = ^(j> 2fe +i)(p fe +i) (for some j G 
{0, • • • — 2}) has d(p k + 1) solutions in GF(p n ). The solution sets of these two 
equations are disjoint because if a d ^ p = —1 then a dl ^ p +1 ) = — a 2d ^ — v 2 
since otherwise, a dt ^ p _1 ) = w p _1 = 1 giving a contradiction. In total, there 
are 2dp k = p k (p 2k + 1) solutions of T + (a + v 2 a~ l , 1) = 0. Finally, we have to 
divide this number by 2 since exactly two values of a map to the same x unless 
a 2 = v 2 (in the latter case, a p +1 — v p +1 = v 2 so a d ( p _1 ) — v p _1 = 1 and 
a d( P k +i) = v p k +i = v 2 giving T+ia + v 2 ^ 1 ,!) + 0). Since p k (p 2k + l)/2 is equal 
to the degree of T + (X, 1), we conclude that this polynomial splits over GF(p n ). 

Now recall that we found the solutions for T + (X, 1) = in the form x = 
a + v 2 a _1 + 2v = a~ 1 (a + v) 2 with a G GF(p n ). Also, x + 1 = a + v 2 oT x - 2v = 
a~ x {a — v) 2 since 2v + 1 = — 2v. Thus, both x and x + 1 are squares in GF(p n ) if 
and only if a has this property. Equations (3) result in a^ p _1 )/ 2 = (— l) p + 1 = 1 
and a( pn-1 )/ 2 = (— u 2 ) p _1 = 1 which means that a is a square in GF(p"). 

Now we prove that polynomial T-(X, 1) does not have any roots in the set 
of squares of GF(p"). Using the substitution x = a _1 (a + v) 2 exactly the same 
way as we did for T + {X, 1), we obtain 

^ _ (a + v) 2d - (a - v) 2d f (a + v) 2d -(a-v) 2 d ^ pk 

= 2v (a^" 1 )/ 2 + a -<r' k -W + c/b 2 *- 1 )/ 2 + a W fc -D/ 2 ) 
= 2v (a^"-^ 2 + a p ^ p2k -^ 2 ) ( a -(P 2fc -D(P fc +D/ 2 + l) . 

Thus, T_(x, 1) = if and only if 

a (p»-l)(p*-l)/2 = _ x Qr a (p 2fc -D(p fc + D/2 = _ x _ (4) 

Denote g = gcd(p 8fe — 1, (p 2k — l)(p k ± 1)) and note that g is equal either to 
2(p 2k — 1) or 4(p 2k — 1) depending on p. Obviously, a 9 = 1 if the corresponding 
identity in (4) holds. If g = 2(p 2k — 1) then a p _1 = —1 (since supposing 
af 2 *- 1 = 1, none of (4) hold) and c^"- 1 )/ 2 = (_i)(p 2fc +i)/ 2 = _i. Thus, both 
a and x = a^ 1 (a + v) 2 are nonsquares in a £ GF(p n ). If g = 4(p 2k — 1) then 
we need to consider the case when a 4( - p2k ^ 1 " > = 1 and a 2( - p2k ^ 1) ^ 1. Thus, 
dP _1 = ±(( p _1 )/ 4 , where £ is a primitive element of GF(p 2rl ) and 

a ( P 2 "-D/ 2 = ( C ( P --i)/4) (p " +1)(p2fc+1)/2 = ( C ( P --i)/ 2 ) (p " +1)( ^ +1)/4 = _! 

since (p n + l)(p 2fc + l)/4 is odd. Therefore, both a and x = a~ 1 (a + v) 2 are 
nonsquares in GF(p 2 ™) so when x G GF(p n ) then it is also a nonsquare in 
GF(p n ). 
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Finally, suppose T + (x, c\) = T + (x, c 2 ) = for some x G GF(p n ) and Ci, c 2 G 
GF(p k )* with ci 7^ c 2 . In particular, we proved that x + ci is a square in GF(p n ). 
Without loss of generality, assume c 2 — c\ = 1 and write 

T+(x, d) - T+(x, c 2 ) = (x + Ci) d - (x + ci + l) d + (x + Cl ) dpk - (x + ci + 
= T_(x + Cl ,l) =0 

that requires x + c± to be a nonsquare in GF(p n ). This contradiction shows that 
roots of T + (x, ci) and T + (x, c 2 ) lie in disjoint subsets of GF(p n ). □ 

The following corollary immediately follows from Proposition 3. 

Corollary 1. Let n = Ak and take any c G GF(p k )* . Then polynomial T + (X 2 , c) 
splits over GF(p n ) and x 2 + c is a square in GF(p n ) for every x G GF(p n ) 
with T + (x 2 ,c) = 0. On the other hand, polynomial T_(X 2 1 c) does not have any 
roots in GF{p n ). Moreover, for different values of c, the corresponding roots of 
T + (X 2 ,c) belong to disjoint subsets. 

Note that taking c = in polynomial T + (X, c) results in 
T + (.x,0) = 2(x(f 2fc+1 )/ 2 + xf fc ^ fc+1 )/ 2 ) 

which is equal to zero if and only if x ( - p2k+1 ' l< - pk _1 )/ 2 = —1. The latter equation has 
(p 2k + \){p k - l)/2 solutions in GF(p n ). On the other hand, for any b G GF(p n ) 
with Trf (bP 2k+1 ) = we have T+(6 2 , 0) = Trf (b p2k+1 ) = and the number of 
b ^ with such a property is equal to (p 2k + l)(p k — 1). Since squaring defines 
a 2-to-l mapping on the set of b G GF{p n )* with Trf (b p2k+1 ) = 0, we conclude 
that all nonzero roots of T+(X, 0) are exactly those b 2 for all b G GF(p")* with 
Tr 2 k k (b p2k+1 ) = 0. Thus, all nonzero roots of T + (X 2 ,0) are exactly those b G 
GF(p")* with Trf (b p2k+1 ) = and the total number of roots is (p 2k + l)(p k -1). 

Suppose T + (x,0) = T + (x,c) = for some x G GF(p n ) and c G GF(p k )*. By 
Proposition 3, x is a square in GF(p n ). Then 

T+(x, 0) - T+(x, c)=x d -(x + c) d + x dpk -(x + c) dpk = T_(x, c) = 

that requires x to be a nonsquare in GF{p n ). This contradiction shows that there 
are no common roots of T + (x, 0) and T + (x, c) in GF(p"). 

Corollary 2. Let n = Ak and take any b G GF(p n ). Then polynomials T + (b 2 ,Y) 
and T_(b 2 ,Y) have a unique root in GF(p k ). Moreover, b 2 + y is a square in 
GF(p n ) for every y G GF(p k ) with T + (b 2 ,y) = 0. On the other hand, T_(6 2 , y) = 
only for y = 0. 

Proof. We know that for different values of c G GF(p fc ), the corresponding roots 
of T + (X 2 , c) belong to disjoint subsets. Then, by Corollary 1, combining together 
all roots of T + (X 2 , c) for all c G GF(p k )* we obtain p k (p 2k + l)(p k - 1) elements 
of GF(p n )*. Adding to them (p 2k + l)(p k - 1) + 1 roots of T+(X 2 ,0) gives all 
p n elements of GF(p n ). Thus, for any b G GF(p n ), polynomial T + (b 2 ,Y) has a 
unique root in GF(p k ). The rest follows from Corollary 1. □ 
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3 New Class of Binomial Bent Functions 

In this section, we prove our main result giving a new binomial weakly regular 
bent function and calculate its Walsh transform coefficients. 

Theorem 1. Let n = Ak. Then p-ary function f(x) mapping GF(p") to GF(p) 
and given by 

f(x) = Tr n ^ 3k+ ^^ k+1 +x 2 ) 

is a weakly regular bent function. Moreover, for b G GF(p") the corresponding 
Walsh transform coefficient of f(x) is equal to 

Sf(b) = _p2fe w TV, s (xo)/4 ; 

where xo is a unique solution in GF(p fe ) of the equation 

W 2k+1 + (b 2 + x)^ 2fc+1 )/ 2 + 6 P fc (f 2fc +D + (b 2 + X f(r 2k +W = . (5) 

Proof. Let £ be a primitive element of GF(p n ) and also denote d = p ak + p 2k — 
p k + 1. If we let x = (iy p +1 for j = 0, . . . ,p 2k and y running through GF(p n )* 
then x will run through GF(p n )* in total p 2k + 1 times. Also note that d — 2 = 
(p 2k - l)(p k + 1) and thus, d(p 2k + 1) = 2(p 2k + 1) (mod p n - 1). Therefore, the 
Walsh transform coefficient of the function f(x) evaluated at b is equal to 

s f (b)-i= J2 ^* v3k+v2k - vk+1+ * 2 - b *) 

xGGF(p™)* 

_ 1 y v ^(e J ^ 2<p2fe+1) +c 2 ^ 2<p2fe+1) -^^ 2fe+1 ) 

v 2k I i Z_^i 

P 2k 

= y* UJ Tt "{(t 3d +t 23 ) z2 - b t 3z ) 

j=0 zeGF(p 2k )' 

= E E c Tr -K(« (p2fc " w )« (p2fc+1Wz2 -( fc « 3+fcp2fc «" 2fc ) z ) , 

3=0 2 eGF(p*)« 

where z = y p2k+1 G GF(p 2fc )* is a p 2k + 1-to-l mapping of GF(p n )* and since 

Tr^ fc (e d + e 1 ) = e d + ^ + e dp2k + e jp2k 

= £(p 2k + l)3 Tr n ^(P 2k -l)j^ 

noting that dp 2k -p 2k - 1 = -p k (p 2k -l) (mod p n — l) and also that ^(p 2 *-^ = 
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Now, by [3, Corollary 3], 



-Tr 2 



S f (b) 1 = sp k J2v(& +lb > V-n l5(P -- 1Wj5(P - +1 ),y _ /fe _ 1 
= -sp*2(-l)^ V ^(« (p2fc - 1)3 ) /-p 2fe -l, 



where s = (— 1) if p = 3 (mod 4) and s = 1 otherwise, 7/(-) is the quadratic 
character of GF{p 2k ) and since r](t) = 1 for any t G GF(p fc )* and Tr£ (£b 2fe - 1 W) 
is nonzero for any j = 0, . . . ,p 2fe (we will show this soon). We also used the 
following identities 

Trf (V (p2fc+lb '(^ +& p2fc e p2fc ) 2 ) = 
= Trf (ft^-fc^-iy + b 2 * 2 "^ 2 "- 1 * + 2bP 2k+1 ) 

= ^l{b^ 2k ^ 2k - 1)] +b p2k+1 ) . 

Using the notations introduced at the beginning of this section, we get 

S f (b) = -sp k ( ]T u-^ww) - ]T u- TrkWu)) ) - P 2k , 

where V(w) = Tr£(fc 2 P 2fc u + foP 2fc+1 )/4Tr r fe ». Note that 

Tr£(u) = u + t/ + u" 1 + u-p" = u-(P k+1 1 (uP k+1 + l) (u + i/) = 

only if u 2 (P fc+1 ) = 1 or u 2 ^ -1 ) = 1 which leads to u 2 = 1 since gcd(2(p fe + 
l),p 2fe + 1) = gcd(2(p fc - l),p 2fe + 1) = 2. Thus, u = ±1 and for these values of 
u we have Tr£(ti) = ±4^0. We conclude that Tr^(u) ^ for any u G U. 

Now we ask ourselves how distinct are the sets of values of ip(u) when u G U+ 
and u G {/_ . Consider equation 4?/>('u) = c for some c G GF(p fe ) and the unknown 
u G U. We can rewrite it as 

Tr^((^ 2fc - C ) U )=-T^(^+ 1 ) . (6) 

First, if Tr^&P + 1 ) = then equation (6) has the same number of solutions in 
U+ and U- for any c G GF(p fc ) since -U+ = U- which means that 5/(6) = -p 2k 
in this case. 

From now on assume Tr£(&P + 1 ) ^ that is equivalent to Trf (V + 1 ) ^ 
since Tr^^ 2 ^ 1 ) = 2Tr 2 . fe (& p2fc+1 ) . By Proposition 2, equation (6) has the same 
number of solutions in U+ and U- except when Tr%((b 2 P 2k - C ) ( -P 2k + 1 ^ 2 ) ^ 
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and Tr£(&P 2fc+1 ) = ±Tr£((& 2 P 2fc - c)^ 1 )/ 2 ) . It is obvious that c = gives a 
solution. Further, 

Tr£ ((b 2 ? 2 * - c )(P 2fc +D/ 2 ) = Tr£ ((fo 2 - c)^ 1 )/ 2 ) 

= Trf ((fe 2 - c )(P 2fc +D/ 2 + (6 2 - c )(p"-D/2+(P 2fc +i)/2^ 

is equal to zero if (b 2 — c)( p _1 )/ 2 = — 1. Therefore, we are interested in the values 
of c G GF(p k ) with 

(b 2 - c )(p"-D/ 2 = 1 and Trf (v> 2 " +1 ± (b 2 - c )(P 2fc +D/ 2 ) = . 

By Corollary 2, Trf (fc^ 1 - (fe 2 - c )(p 2fc +i)/2) = T _(fo 2 , -c) = only for 
c = and Trf (feP 2k+1 + (6 2 - c )(p 2fc +i)/2) = T+ (b 2 , -c) = for a unique value 
c £ GF(p fc ) (for this root, b 2 - c is a square in GF(p n ), i.e., {b 2 - c)^"- 1 )/ 2 = 1). 
Thus, by Proposition 2, 

S f (b) = -sp k (- S p k + sp k u; T ^/^ -p 2k = WM*")/ 4 , 

where xo is a unique solution in GF(p k ) of T + (b 2 , x) = 0. □ 

In some cases, we can find exact solution of (5). Assume b 2 e GF(p 2k ). 
Then b 2(p2k+1 ^ = b 4 giving b p2 " +1 = ±b 2 . It was shown that x = is the only 
solution of (5) if and only if Trf (b p2k +1 ) = that in our case is equivalent to 
Tr 2fc (& 2 ) = 0. In general, (5) takes on the form 

± (b 2 + b 2pk ) + (b 2 + x)^- 1 )/ 2 (b 2 + x + b 2pk + x p ") = or 
(V + xY p2k -V/ 2 ± l) (b 2 + b 2p ") + 2x(b 2 + x)^ 2k -^ 2 = 

and is satisfied by exactly one nonzero x 6 GY{p k ) which is x = — Tr^ fe (6 2 ). 
Therefore, if b 2 e GF(p 2k ) then T+{b 2 , x Q ) = for x Q = -Trf (b 2 ). 
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